CVE-2022-29464 PoC — WSO2 API Manager 路径遍历漏洞

Source

Associated Vulnerability

Description

Python script to exploit CVE-2022-29464 (mass mode)

Readme

# WSO2 Carbon Server CVE-2022-29464
Pre-auth RCE bug  CVE-2022-29464.

## Usage

```bash
python exploit.py -u <wso2_carbon_server> 
```
or:

```bash
python exploit.py -f <file>
```
## Zoomeye Dork

```bash

zoomeye search 'title:"WSO2 Management Console"'  -num 10  -filter=ip,port
```
## Shodan Dork

```bash

shodan search 'title:"WSO2 Management Console"' --fields ip_str,port  --limit 1000 --separator ":" | grep ''
```

File Snapshot

 [4.0K]  /data/pocs/3586fdac7e43b7fc98fe12cc3e53cbf2c52535c7
├── [4.5K]  exploit.py
├── [4.6K]  exploit-v2.py
├── [ 425]  README.md
├── [ 109]  shodan-dork.txt
└── [  75]  zoomeye-dork.txt

0 directories, 5 files

Remarks